docker engine vulnerabilities (CVE)

CVE records published for docker engine, newest first. Follow to get an email when a new one appears.

4 results
6.8Medium
CVE-2026-33997

Moby: Off-by-one error in plugin privilege validation

moby moby; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5; Red Hat Red Hat multicluster global hub 1.5.3

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, t…